I appreciate the response.
So, I added:
name ALLOW-ALL { default-action accept rule 1 { action accept state { established enablenew enable related enable } } rule 2 { action drop log enable state { invalid enable } } }
Unfortunately, no new results :/
I don't understand what is dropping the ICMP packets. They get to eth1.10, as shown in the tcpdump.
Am I understanding it correctly when I say the path from the switch to my interface is:
eth1.10>eth1 (or just straight to eth1) >local (router L3) >eth2